$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: zszXGAf/g18Fc8XsKbJI/re64xVD6ncNURGNczRqnqE= Subject key identifier: D0:C2:DA:37:87:72:02:20:6B:47:E8:BD:D4:74:5B:FC:C2:A7:AC:DC Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 02B3 Signing time: Sat 23 Aug 2025 01:43:34 +0000 Manifest this update: Sat 23 Aug 2025 01:43:34 +0000 Manifest next update: Sat 30 Aug 2025 01:43:34 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: 6l3qhe42wq/tMbCkAiYwFkeApkf1g3ZBQORFY/4o9AY=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: Aug 23 01:43:34 2025 GMT Not After : Aug 30 01:43:34 2025 GMT Subject: CN=68a91cc6-e86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:d5:47:5a:11:9e:f4:7a:67:7c:5f:7e:ed: 56:b8:d9:c7:82:29:ab:fd:03:3b:90:15:d1:59:cd: f3:29:5e:2d:25:9a:dc:db:4e:28:ff:9a:81:c3:24: 2b:70:4d:57:9f:38:be:1e:c3:44:53:af:c0:45:f5: f7:7f:de:68:8d:f1:07:0e:42:5b:d4:8d:96:e7:c2: f2:53:8b:64:d7:2c:e1:1e:a9:df:70:ee:5a:58:d4: c0:b9:f3:16:37:ba:e8:c1:b8:72:02:aa:a2:85:f4: 9d:b1:7f:31:69:74:92:71:86:5f:8c:3d:18:f9:35: 69:31:87:68:ab:2e:11:7f:26:d8:ee:42:67:9a:71: 50:6d:47:6c:22:ad:30:b6:94:66:42:e1:d5:a3:51: 7d:d7:b2:b2:8a:98:bf:46:7e:f4:4c:46:32:3c:05: f2:6e:f6:9d:01:48:a1:48:b3:2e:2e:2b:ec:ac:07: b4:87:df:87:a4:fe:5e:e4:80:d2:33:eb:51:1a:bc: 8d:03:a0:03:1d:03:54:83:16:15:52:f5:d4:3c:49: a1:07:a3:dd:d6:99:47:81:6e:f8:35:69:73:3c:e1: 10:50:24:9a:ff:53:94:0a:1a:31:b4:a6:c8:89:7c: f2:d0:0d:a6:cd:95:c5:c9:ca:86:c1:97:31:1b:e8: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C2:DA:37:87:72:02:20:6B:47:E8:BD:D4:74:5B:FC:C2:A7:AC:DC X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8b:a0:f9:e7:39:5a:1c:a0:0a:39:55:9e:f6:ed:ec:72:32: 71:3c:90:3c:54:4b:5b:78:f5:03:bc:55:98:2f:1d:61:1b:2e: 49:7c:ed:4b:c5:d2:17:b3:40:15:76:c5:ad:3c:7d:49:1d:29: 5f:5e:e6:1c:21:6a:b0:35:69:d2:38:20:e9:e7:04:c4:5c:e2: 6f:61:e8:c3:40:c9:a1:91:ea:4a:2e:4e:b6:b4:51:42:53:25: 6b:93:e6:34:53:82:51:f3:e7:d8:a4:79:1b:53:e4:9d:65:ed: cb:dc:ce:be:3f:db:8d:4d:e9:87:1f:31:02:6d:44:e3:13:d3: a1:dd:f8:ee:9b:08:f4:17:ae:41:18:b9:1c:e9:f5:a7:40:74: ca:fc:ef:54:36:82:90:39:56:f0:2e:ab:36:cc:5e:ec:94:41: 68:75:53:6c:70:16:28:8d:78:31:ce:99:af:51:0f:b6:a5:01: da:41:22:5a:20:30:be:70:8b:60:ea:31:27:b7:59:11:ef:84: 34:f6:71:14:95:ae:41:fc:6d:b8:5f:25:c0:87:f8:49:78:da: ac:71:f4:5a:c3:bf:22:39:38:18:77:1b:05:de:f0:b5:3c:e9: 29:44:ed:20:aa:71:4f:84:a8:00:5a:cc:14:ce:08:47:84:57: 41:58:66:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjUwODIzMDE0MzM0WhcNMjUwODMwMDE0MzM0WjAYMRYwFAYD VQQDEw02OGE5MWNjNi1lODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgbVR1oRnvR6Z3xffu1WuNnHgimr/QM7kBXRWc3zKV4tJZrc204o/5qBwyQr cE1Xnzi+HsNEU6/ARfX3f95ojfEHDkJb1I2W58LyU4tk1yzhHqnfcO5aWNTAufMW N7rowbhyAqqihfSdsX8xaXSScYZfjD0Y+TVpMYdoqy4RfybY7kJnmnFQbUdsIq0w tpRmQuHVo1F917Kyipi/Rn70TEYyPAXybvadAUihSLMuLivsrAe0h9+HpP5e5IDS M+tRGryNA6ADHQNUgxYVUvXUPEmhB6Pd1plHgW74NWlzPOEQUCSa/1OUChoxtKbI iXzy0A2mzZXFycqGwZcxG+h+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDC2jeH cgIga0fovdR0W/zCp6zcMB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOi6D55zlaHKAKOVWe9u3scjJxPJA8VEtbePUDvFWYLx1hGy5JfO1L xdIXs0AVdsWtPH1JHSlfXuYcIWqwNWnSOCDp5wTEXOJvYejDQMmhkepKLk62tFFC UyVrk+Y0U4JR8+fYpHkbU+SdZe3L3M6+P9uNTemHHzECbUTjE9Oh3fjumwj0F65B GLkc6fWnQHTK/O9UNoKQOVbwLqs2zF7slEFodVNscBYojXgxzpmvUQ+2pQHaQSJa IDC+cItg6jEnt1kR74Q09nEUla5B/G24XyXAh/hJeNqscfRaw78iOTgYdxsF3vC1 POkpRO0gqnFPhKgAWswUzghHhFdBWGZ6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:59 2025 by rpki-client